Tracked app vulnerabilities

HIGH 8.8

2025-07-22

Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunder…

MEDIUM 6.5

2025-07-22

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in…

HIGH 8.1

2025-07-22

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, …

CRITICAL 9.8

2025-07-22

The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability …

HIGH 8.1

2025-07-22

Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability was fixed in F…

HIGH 8.1

2025-07-22

Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 14…

CRITICAL 9.8

2025-07-22

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect compu…

MEDIUM 6.5

2025-07-22

On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulner…

HIGH 7.5

7-Zip

2025-07-17

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference …

HIGH 7.5

7-Zip

2025-07-17

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service …

HIGH 8.8

2025-07-15

Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

HIGH 8.8

2025-07-15

Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead…

MEDIUM 6.5

Zoom Workplace

2025-07-10

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.

LOW 3.1

2025-07-08

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

HIGH 7.8

2025-07-08

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-07-08

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-07-08

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-07-08

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

HIGH 7.0

+1

2025-07-08

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

HIGH 7.8

2025-07-08

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CRITICAL · vendor

2025-07-08

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

MEDIUM 5.5

2025-07-08

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Windows Storage Spoofing Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Notification Elevation of Privilege Vulnerability

Windows Notification Elevation of Privilege Vulnerability

Windows Connected Devices Platform Service Remote Code Execution Vulnerability

Windows StateRepository API Server file Tampering Vulnerability

Windows Print Spooler Denial of Service Vulnerability

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Windows Netlogon Denial of Service Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability